Vsee

2 CVEs across 2 Vsee products. Browse Vsee vulnerabilities, severities, and proof-of-concept exploits.

Vsee products with known CVEs

ProductCVEs
Clinic2
Clinic API2
Vsee CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-13381High8.12026-07-20VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint. An authenticated attacker…
CVE-2026-13380High7.52026-07-20VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are p…